Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          IlsFuc2Mlv8wOGGaHldzjgCUCPheHvYB/q9fH8haroE=
Subject key identifier:   0C:1A:A2:2E:7D:F5:46:7C:15:DB:3C:5E:11:9F:77:38:E2:F0:F4:D0
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       019D98F48356BB08B919923D388D6CD41A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          07B3
Signing time:             Fri 17 Apr 2026 01:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:54 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: QRwawGW0fgXH2UFOywgzDJGnHsHsa/icjagbZT/ky24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:83:56:bb:08:b9:19:92:3d:38:8d:6c:d4:1a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: Apr 17 01:00:54 2026 GMT
            Not After : Apr 18 01:00:54 2026 GMT
        Subject: CN=0c1aa22e7df5467c15db3c5e119f7738e2f0f4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:cd:54:b0:4c:78:82:0c:8a:f0:e2:c6:3c:
                    cf:e8:df:af:ef:8e:56:6d:35:12:a0:4f:be:b7:e0:
                    cf:71:8f:78:7f:3b:43:22:7c:ab:2c:20:cd:6a:45:
                    58:40:bc:80:05:d6:1e:5e:8c:dc:87:b0:ff:73:ee:
                    cf:05:ca:c9:26:66:fd:4d:cd:6d:b3:a6:e4:f2:af:
                    3f:71:2c:bc:30:f4:aa:fb:dc:f9:3a:58:de:1e:bf:
                    90:a5:14:7c:26:03:6f:f2:ab:60:a8:08:33:10:78:
                    32:d4:77:d8:15:ff:bd:80:67:9d:03:5c:54:50:56:
                    be:58:83:eb:29:65:f1:44:95:06:e7:aa:4e:0e:5c:
                    fe:78:a2:08:c8:77:07:5e:cc:0c:2f:f4:8e:89:28:
                    43:30:38:df:2f:7a:22:d0:fb:2e:c1:9a:25:a6:02:
                    e5:ff:81:b4:92:ca:0f:50:81:19:0f:1d:76:86:e3:
                    95:12:08:30:12:c7:4a:34:4f:27:b3:e0:0d:af:25:
                    c3:f3:73:e3:17:d8:da:f6:38:d7:9a:02:05:4a:8e:
                    86:52:39:c5:8e:f5:aa:5c:8d:75:ca:9d:1b:14:68:
                    56:9a:a1:85:1e:df:4a:1f:39:3a:c2:c1:fc:71:bf:
                    08:17:bb:8d:d4:8b:be:30:6f:1f:6c:e5:18:08:bd:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1A:A2:2E:7D:F5:46:7C:15:DB:3C:5E:11:9F:77:38:E2:F0:F4:D0
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f6:ce:f0:9f:9a:72:e1:73:36:44:49:71:17:9d:7d:28:17:
         92:a4:b2:fe:54:f9:25:3f:0d:aa:10:41:6d:0a:78:09:81:6b:
         e6:4b:d8:9d:a4:a1:7e:f1:59:bf:cc:28:2b:27:c4:fe:35:bc:
         33:37:72:67:4a:b3:b9:4d:f1:05:4a:a1:5e:38:90:f1:ef:ea:
         fb:66:d4:7d:6c:e9:16:e9:e8:bf:23:fb:f9:98:e2:6c:ac:1a:
         db:53:fa:de:38:ef:2c:42:62:8e:31:2f:97:97:92:61:36:af:
         e3:8f:cf:af:f5:0b:72:b4:91:9c:fa:f0:8c:be:ee:b7:ba:bd:
         a1:43:1f:6e:c4:59:fc:90:99:b8:fc:92:c0:26:38:c9:65:c4:
         a5:26:a9:fb:38:88:16:88:e6:f7:60:de:80:37:ef:06:7e:bd:
         21:e7:d6:17:a2:8d:a1:a8:68:51:9a:43:09:a4:db:90:cf:f6:
         63:30:31:3d:c1:64:38:c3:6c:84:35:80:d0:27:38:ca:32:3c:
         8e:07:06:e8:4d:e7:38:7d:4e:7b:e3:39:6c:64:2a:02:99:30:
         fd:b1:a2:ed:58:d3:b0:31:ff:2a:9b:f3:8c:3e:f7:f8:47:3f:
         33:11:2d:9e:3c:ce:23:c3:62:86:8d:12:25:66:b0:6c:5d:16:
         8b:4e:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:25 2026 by rpki-client